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LEARNTO INTERNETWORK SWITCH 



FIELD OF THE INVENTION 

The present invention relates to network communications, and more 
specifically, to a switch configured to learn the network layer addresses of a plurality 
of locally attached virtual local area networks. 



BACKGROUND OF THE INVENTION 

Large computer network systems are often logically partitioned into numerous 
smaller networks, referred to as subnets, virtual local area networks or VLANs. 
Referring to Figure 1, it is a block diagram of a network system 100 that has been 
logically partitioned into three VLANs: VLAN 102, VLAN 1 10 and VLAN 118. 
VLAN 102 includes a server 104 and two clients 106 and 108. VLAN 1 10 includes a 
server 1 12 and two clients 1 14 and 1 16. VLAN 1 18 includes a server 120 and two 
clients 122 and 124. The members of each VLAN communicate with each other 
through a hub or switch. In the illustrated example, the members of VLANs 102, 110 
and 118 communicate with each other through switches 134, 136, and 138, 
respectively. 

All messages sent between members of a given VLAN are sent at the data link 
layer (level two) of the ISO reference model. Messages sent between VLANs are 
routed at the network layer (level three) of the ISO reference model. Control 
information is transmitted with a packet to indicate the device that sent the packet, the 
device that is to receive the packet, and the protocol-type of the packet A packet sent 
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between VLANs may include, for example, control information that indicates the 
protocol-type (PT) of the packet, the data link layer address of the source device (SA), 
the data link layer address of the destination device (DA), the network layer address of 
the source device (SNLA), and the network layer address of the destination device 
(DNLA). 

The larger network system 100 is formed by connecting the VLANs to each 
other through a router 126. Specifically, VLANs 102, 1 10 and 1 18 are respectively 
connected to ports 130, 128 and 132 of router 126. Because the VLANs are 
connected to each other through router 126, the members of each VLAN are able to 
communicate with members of other VLANs that are part of the larger network system 
100. However, a different mechanism is used to communicate between members of 
different VLANs than is used to communicate between members of the same VLAN. 

TYPICAL INTRA- VLAN COMMUNICATION 
15 Within a given VLAN, each device has a unique data link layer address (L2 

address). Before one member of a VLAN can communicate with another member of 
the same VLAN, it must determine the L2 address of the device with which it desires 
to communicate. Consider a typical intra- VLAN communication where client 106 
desires to send a message to server 104. Initially, client 106 knows the network layer 
20 address (L3 address) of server 104, but does not know the L2 address of server 104. 
To obtain the L2 address of server 104, client 106 transmits a request for the L2 
address of server 104. The request includes the L3 address of server 104, and 
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specifies the L2 address of client 106 as the "source address" of the request Such 
requests are referred to as Address Resolution Protocol queries ("ARP queries"). 

Switch 134 receives the ARP query from client 106 and broadcasts the ARP 
query to all members of VLAN 102. Server 104 receives the broadcasted ARP query 
5 and replies by sending a message that contains its L2 address to client 106 through 
switch 134. The server 104 is able to address the reply message directly to client 106 
using the L2 address of client 106 that was contained in the ARP query. A reply 
message to an ARP query is referred to as an ARP response. The ARP response is 
transmitted from server 104 to client 106 through switch 134. Client 106 receives the 

10 ARP response and transmits the message to server 104 through switch 134 in a packet 
that specifies the L2 address of server 104 as the destination address and the 1,2 
address of client 106 as the source address. 

TYPICAL DSfTER-VLAN COMMUNICATION 
A typical inter- VLAN communication is more complicated. Assume, for 

15 example, that client 1 14 desires to send a message to server 104. Initially, client 1 14 
is aware of the L3 address of server 104. Based on the L3 address, client 1 14 is able 
to determine that server 104 does not belong to the same VLAN as client 1 14. Upon 
determining that server 104 is on a different VLAN than client 1 14, client 1 14 sends 
an ARP query that requests the L2 address of the default gateway. 

20 Router 126 receives the ARP query at port 128 and responds by transmitting 

an ARP response to client 1 14 that contains the L2 address of port 128. Client 1 14 
then transmits the message to router 126 by specifying the L2 address of port 128 as 
the L2 destination address for the message. The message also contains control 
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information that specifies a Destination Network Level Address ("DNLA"). In the 
present example, the L3 address of server 104 is the DNLA specified in the control 
information of the message. 

Router 126 receives the message from client 1 14 and uses the L3 address of 
5 server 104 to look up the outbound port that connects router 126 to server 104. 
Router 126 will have previously acquired this information using a routing protocol. 
In the present example, router 126 would determine that port 130 connects to the 
VLAN containing server 104. Router 126 then transmits an ARP query through port 
130 to VLAN 102 requesting the address of server 104. The ARP query specifies the 
10 L2 address of port 130 as the source address, and includes the L3 address of server 
104. The switch 134 of VLAN 102 broadcasts the ARP query to all members of 
VLAN 102. 

Server 104 responds to the ARP query by transmitting an ARP response that 
contains its L2 address. The destination address specified in the ARP response is the 

15 L2 address of port 130. When router 126 receives the ARP response through port 
130, router 126 forwards to server 104 the message that was originally sent from 
client 1 14. This is accomplished by encapsulating the message in a packet that 
specifies the L2 address of port 130 as the source address and the L2 address of 
server 104 as the destination address, and then sending the packet to VLAN 102 

20 through port 130. 

The inter- VLAN communication technique described above has some 
significant disadvantages. For example, all client-server traffic that requires inter- 
VLAN communication must traverse the router. However, conventional routers have 
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throughput and latency limitations for client-server operations. As a result, client- 

m 

server operations that use intra- VLAN communications are generally performed faster 
than the same operations using inter-VLAN communications. Another disadvantage is 
that router ports are relatively expensive. Therefore, network costs can increase 
dramatically with an increase in the number of router ports required to support inter- 
VLAN communication. 
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SUMMARY OF THE INVENTION 

A method and apparatus for forwarding packets between locally attached 
virtual local area networks are provided. A learning internetwork switch is connected 
between a router and a plurality of virtual local area networks. Communications 
between devices on the virtual local area networks and the router pass through the 
learning internetwork switch. By inspecting the packets that flow between the devices 
and the router, the learning internetwork switch determines the location of the devices 
without having to use a routing protocol. The learning internetwork switch learns the 
data link layer addresses and network layer addresses of the various devices. Once 
the learning internetwork switch has learned the location (port), the data link layer 
address of a device, and the network layer address of a device, the learning 
internetwork switch can forward packets between different virtual local area networks 
using network layer switching without involving the router. 

The learning internetwork switch contains a connection to each virtual local 
area network and a corresponding connection to the router. All traffic between the 
devices in the VLANs and the router must pass through the learning internetwork 
switch. The learning mechanism inspects certain packets sent between the router and 
the communicating devices and stores data indicating the port location of each device 
based on information contained in the certain packets. 

According to one embodiment, the learning mechanism is further configured to 
store data indicating a correspondence between data link layer addresses of the devices 
and network layer addresses of the devices based on information contained in the 
certain packets. 
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According to an embodiment, the learning internetwork switch includes a 
proxy forwarding mechanism. The proxy forwarding mechanism detects when a 
packet sent by a first device of a first virtual local area network contains (1) a data link 
layer destination address associated with the router and (2) a network layer destination 
address associated with a second device of a second virtual local area network in the 
set of virtual local area networks. 

The proxy forwarding mechanism determines the data link layer address of the 
second device based on the network layer address of the second device and replaces in 
the packet the data link layer destination address associated with the router with the 
data link layer address associated with the second device. The proxy forwarding 
mechanism then transmits the packet through the port to which the second device is 
connected. 

A method, for use by a learning internetwork switch connected to a router, for 
determining locations of devices that belong to a set of virtual local area networks 
locally attached to the learning internetwork switch is also provided. According to the 
method, a packet from a device that belongs to one of the virtual local area networks is 
receiving at a first port of the learning internetwork switch. 

It is determined whether the packet is a request for the data link layer address 
of the particular port of the router. If the packet is a request for the data link layer 
address of the particular port of the router, then a data link layer source address and a 
network layer source address are read from the packet Data indicating that the data 
link layer source address corresponds to the network layer source address is stored. 
Data indicating that the device that originally transmitted the packet is connected to the 
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first port is also stored. The packet is then forwarded to the particular port of the 
router. 

If the packet contains a message to be sent through the router to a second 
device that belongs to a second virtual local area network of the set of virtual local area 

5 networks, then a network layer destination address associated with the second device 
is read from the packet. A lookup operation is performed to determine if configuration 
information has been stored for the network layer destination address. If 
configuration information has been stored for the network layer destination address, 
then the configuration information is read to determine a data link layer address of the 

10 second device and that the second device is connected to a second port of the learning 
internetwork switch. The packet is forwarded to the second device through the 
second port. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

The present invention is illustrated by way of example, and not by way of 
limitation, in the figures of the accompanying drawings and in which like reference 
numerals refer to similar elements and in which: 

Figure 1 is a block diagram of a prior art network system in which all inter- 
VLAN communication is performed through a router; 

Figure 2 is a block diagram of a network system that includes a learning 
internetwork switch configured to perform proxy forwarding according to an 
embodiment of the invention; 

Figure 3a is a portion of a flow chart illustrating how the learning internetwork 
switch learns configuration information during the communication that takes place 
between when a source device requests the data link layer address of the default 
gateway port of a router; 

Figure 3b is a portion of the flow chart of Figure 3a; 

Figure 4a is a portion of a flow chart illustrating how the learning internetwork 
switch learns configuration information as an internetwork message is forwarded by a 
router to a destination device; 

Figure 4b is a portion of the flow chart of Figure 4a; 

Figure 4c is a portion of the flow chart of Figure 4b; 

Figure 5 is a flow chart illustrating the steps performed by a learning 
internetwork switch to perform proxy forwarding according to an embodiment of the 
invention; 
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Figure 6a is a portion of a flow chart illustrating the steps performed by i 

m 

learning internetwork switch upon detecting the arrival of a packet; and 
Figure 6b is a portion of the flow chart of Figure 6a. 



□ 
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DHTATI -FD DESCRIPTION OF THE PREFERRE D EMBODIMENT 

Referring to Figure 2, it is a block diagram illustrating the network system 100 
of Figure 1 with the addition of a learning internetwork switch 200 according to an 
embodiment of the invention. As shall be described in greater detail below, learning 
internetwork switch 200 is a device for forwarding traffic between locally attached 
VLANs using L3 addresses. Learning internetwork switch 200 generates a table that 
reflects the correlation between L2 and L3 addresses based on information learned 
from inspecting certain packets (e.g. ARP queries and ARP responses) sent between 
router 126 and the members of the various VLANs 102, 1 10 and 1 18. The learning 
process is performed without impacting either the current configuration of the routers 
in the network or the network layer address assignment. 

For the purposes of explanation, the invention shall be described with 
reference to packets transmitted according to the Internet Protocol (IP). However, the 
present invention is not limited to any particular protocol. The information contained 
in the packets inspected by the learning internetwork switch 200 will vary depending 
on the protocol used in the network. The scope of present invention includes learning 
internetwork switches configured to take into account such variations. The design and 
operation of such switches will be evident to one skilled in the art upon reading the 
following description. 

In the following discussion, it shall be explained how learning internetwork 
switch 200 learns the correspondence between L2 and L3 addresses when a message 
is sent from one device (SOURCE-DEV) that belongs to one VLAN (SOURCE- 
VLAN) to another device (DEST-DEV) that belongs to another VLAN (DEST- 
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VLAN). The L2 and L3 addresses of SOURCE-DEV shall be referred to hereafter as 
SDL2 and SDL3, respectively, and the L2 and L3 addresses of DEST-DEV shall be 
referred to hereafter as DDL2 and DDL3, respectively. The L2 and L3 addresses of 
the port of router 126 that is serving as the default gateway of the SOURCE- VL AN 
(DG) shall be referred to hereafter as DGL2 and DGL3, respectively. 

From the perspective of the device transmitting a message, the process of 
transmitting a packet to a device in another VLAN is not affected by the presence of 
learning internetwork switch 200. Thus, the SOURCE-DEV must (1) determine the 
L2 address of the default gateway, and (2) transmit the message to the default gateway 
in a packet that specifies the L3 address of the destination device. Figures 3a and 3b 
are a flow chart illustrating the steps performed by the various devices of network 
system 100 while the source device determines the L2 address of the destination 
device. Figures 4a, 4b and 4c are a flow chart illustrating the steps performed by the 
various devices of network system 100 when the source device transmits the message 
to the default gateway. 

DETERMINING THE L2 ADDRESS OF THE DEFAULT GATEWAY 
Initially, SOURCE-DEV knows DDL3 and DGL3 but does not know DDL2 
or DGL2. At step 300, SOURCE-DEV determines that DEST-DEV is not a member 
of SOURCE- VLAN based on DDL3. Because DEST-DEV is not a member of 
SOURCE-VLAN, SOURCE-DEV knows that the message to DEST-DEV must be 
sent through DG. For example, assume that client 1 14 desires to send a message to 
server 104. Initially, client 1 14 knows the L3 address of server 104 and the L3 
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address of port 128 but does not know DDL2 nor the L2 address of port 128. At step 
300, client 1 14 determines that server 104 is not a member of VLAN 1 10 based on the 
L3 address of server 104. Because server 104 is not a member of VLAN 1 10, client 
1 14 knows that the message to server 104 must be sent through port 128. 

To obtain DGL2, SOURCE-DEV transmits an ARP query that requests the L2 
address associated with DGL3 (step 302). The destination address specified in the 
ARP query is a special L2 address that indicates that the message is to be broadcast to 
all devices on SOURCE- VLAN. Upon receiving the ARP query, the L2 switch of the 
SOURCE-VLAN broadcasts the ARP query to all members of SOURCE-VLAN. The 
router port that is serving as the default gateway of a VLAN is a member of the VLAN 
to which the port is connected. Therefore, the L2 switch of the SOURCE-VLAN will 
broadcast the ARP query to DG. 

Continuing with the present example, client 1 14 transmits an ARP query that 
requests the L2 address associated with the L3 address of port 128 at step 302. The 
destination address specified in the ARP query is a special L2 address that indicates 
that the message is to be broadcast to all devices on VLAN 1 10. Upon receiving the 
ARP query, the switch 136 broadcasts the ARP query to all members of VLAN 1 10. 
Port 128, which is serving as the default gateway of a VLAN 1 10 is a member of 
VLAN 1 10. Therefore, switch 136 will broadcast the ARP query to port 128. 

As illustrated in Figure 2, all communications between VLANs 102, 1 10 and 
1 18 and router 126 flow through learning internetwork switch 200. Specifically, 
ports 202, 204 and 206 of learning internetwork switch 200 correspond to ports 128, 
130 and 132 of router 126, respectively. All messages sent from VLANs 1 10, 102 
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and 1 18 are received at ports 202, 204 and 206 of learning internetwork switch 200, 
respectively, prior to being forwarded to the corresponding ports of router 126. For 
example, messages sent by members of VLAN 1 10 to port 128 will arrive at port 202 
of learning internetwork switch 200 prior to being forwarded by the switch to port 
5 128 of router 126. Similarly, messages from VLANs 102 and 1 18 will arrive at ports 
204 and 206 of learning internetwork switch 200, prior to being forwarded to ports 
130 and 132 of router 126. In addition, messages sent through ports 128, 130 and 
132 of router 126 pass through learning internetwork switch 200 prior to being 
\Q forwarded to VLANs 1 10, 102 and 1 18, respectively. 

m 10 At step 304, learning internetwork switch 200 receives the ARP query 

m 

ig through the port of learning internetwork switch 200 that corresponds to DG and 

inspects the protocol-type information in the ARP query to determine that the packet is 
an ARP query. In response to detecting that the packet is an ARP query, learning 
internetwork switch 200 reads the L2 source address (S A) and the L3 source address 
15 (SNLA) from the ARP query (step 306). The SA and SNLA specified in the ARP 
query will be SDL2 and SDL3, respectively. At step 308, the learning internetwork 
switch 200 stores data indicating that SDL2 is the L2 address that corresponds to 
SDL3, Learning internetwork switch 200 also stores data indicating that the device 
that has the L2 address SDL2 is connected to the port of learning internetwork switch 
20 200 on which the ARP query arrived. 

Continuing again with the present example, at step 304, learning internetwork 
switch 200 receives the ARP query through port 202, which corresponds to port 128. 
Learning internetwork switch 200 reads the L2 source address (S A) and the L3 source 
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address (SNLA) from the ARP query at step 306. The SA and SNLA specified in the 
ARP query will be the L2 address of client 1 14 and the L3 address of client 1 14, 
respectively. At step 308, the learning internetwork switch 200 stores data indicating 
that the L2 address of client 1 14 is the L2 address that corresponds to the L3 address 
5 of client 1 14. Learning internetwork switch 200 also stores data indicating that client 
1 14 is connected to the port of learning internetwork switch 200 on which the ARP 
query arrived. 

At step 3 10, the learning internetwork switch 200 forwards the ARP query to 
the port of router 126 that corresponds to the port on which learning internetwork 

10 switch 200 received the ARP query. For example, if learning internetwork switch 
200 received the ARP query at port 202, then learning internetwork switch 200 
forwards the ARP query to port 128 of router 126. If learning internetwork switch 
200 received the ARP query at port 204, then learning internetwork switch 200 
forwards the ARP query to port 130 of router 126. If learning internetwork switch 

1 5 200 received the ARP query at port 206, then learning internetwork switch 200 

forwards the ARP query to port 132 of router 126. In the present example, the ARP 
query that is broadcast over VLAN 110 arrives at port 202, and is therefore forwarded 
by learning internetwork switch 200 to port 128 of router 126. 

At step 312, router 126 transmits a response to the ARP query through DG, 

20 which will be the same port of router 126 on which the ARP query was received. The 
data link layer destination address (DA) specified in the ARP response is SDL2. The 
data link layer source address (S A) specified in the ARP response is DGL2. The 
protocol-type (PT) specified in the ARP response indicates that the packet is an ARP 
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response. The network layer source address (SNLA) specified in the ARP response 
is DGL3. The network layer destination address (DNLA) specified in the ARP 
response is SDL3. 

In the present example, router 126 transmits a response to the ARP query 
5 through port 128 at step 312. The data link layer destination address (DA) specified in 
the ARP response is the L2 address of client 1 14. The data link layer source address 
(SA) specified in the ARP response is the L2 address of port 128. The protocol-type 
n (PT) specified in the ARP response indicates that the packet is an ARP response. The 

'% network layer source address (SNLA) specified in the ARP response is the L3 address 

; J 10 of port 128. The network layer destination address (DNLA) specified in the ARP 

*g response is the L3 address of client 1 14. 

^ At step 3 14, learning internetwork switch 200 receives the ARP response from 

t: 

O DG. At step 3 1 6, learning internetwork switch 200 reads the SNLA specified in the 

M ARP response to determine if the ARP response is from DG. At step 3 1 8, learning 

□ IS internetwork switch 200 stores data indicating that DGL2 is the L2 address that 

corresponds to DGL3. At step 320, learning internetwork switch 200 forwards the 
ARP response to SOURCE-DEV. SOURCE-DEV receives the ARP response and 
reads the DGL2 from the ARP response. 

Returning to the present example, learning internetwork switch 200 receives 
20 the ARP response from port 128 at step 3 14. At step 316, learning internetwork 
switch 200 reads the SNLA specified in the ARP response to determine if the ARP 
response is from port 128. At step 318, learning internetwork switch 200 stores data 
indicating that the L2 address of port 128 is the L2 address that corresponds to the L3 
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address of port 128. At step 320, learning internetwork switch 200 forwards the ARP 

« 

response to client 1 14. Client 1 14 receives the ARP response and reads the L2 
address of port 128 from the ARP response. 

5 TRANSMITTING A MESSAGE TO THE DEFAULT GATEWAY 

Having acquired DGL2 through the process described above, SOURCE-DEV 
has the information it requires to transmit the message to DEST-DEV through DG. 
Figures 4a, 4b and 4c are a flow chart illustrating the steps performed by the various 
devices within the network system 100 as SOURCE-DEV attempts to transmit the 
10 message to DEST-DEV. 

At step 400, SOURCE-DEV encapsulates the message in a packet and 
transmits the packet. The data link layer destination address (DA) specified in the 
packet is DGL2. The data link layer source address (SA) specified in the packet is 
SDL2. The protocol-type (PT) specified in the packet indicates that the packet is an 
15 Internet Protocol (IP) packet. The netwoik layer source address (SNLA) specified in 
the packet is SDL3. The network layer destination address (DNLA) specified in the 
packet is DDL3. Based on the DA contained in this control information, the L2 switch 
of SOURCE-VLAN transmits the packet to DG. 

Returning to the example in which client 1 14 is transmitting an inter- VLAN 
20 message to server 104, client 1 14 encapsulates the message in a packet and transmits 
the packet at step 400. The data link layer destination address (DA) specified in the 
packet is the L2 address of port 128. The data link layer source address (SA) 
specified in the packet is the L2 address of client 1 14. The protocol-type (PT) 
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specified in the packet indicates that the packet is an Internet Protocol (IP) packet The 
network layer source address (SNLA) specified in the packet is the L3 address of 
client 1 14. The network layer destination address (DNLA) specified in the packet is 
the L3 address of server 104. Based on the DA contained in this control information, 
the switch 136 transmits the packet to port 128. 

At step 402, learning internetwork switch 200 receives the packet at the port of 
learning internetwork switch 200 that corresponds to DG. After receiving the packet, 
learning internetwork switch 200 reads the control information to determine that the 
packet is destined for DG and that the protocol-type of the packet is IP. At step 404, 
learning internetwork switch 200 determines whether it has already stored the L2 
address associated with DDL3. In the present example, learning internetwork switch 
200 has not yet stored the L2 address associated with DDL3. Therefore, control 
passes to step 406. If switch had stored the L2 address associated with DDL3, 
learning internetwork switch 200 would forward the packet directly to the DEST-DEV 
(step 408), thereby circumventing the use of router 126. The process of forwarding 
inter- VLAN packets without involving router 126, referred to as proxy forwarding, 
shall be described in greater detail below. 

Returning to the present example, learning internetwork switch 200 receives 
the packet at port 202 at step 402. After receiving the packet, learning internetwork 
switch 200 reads the control information to determine that the packet is destined for 
port 128 and that the protocol-type of the packet is IP. At step 404, learning 
internetwork switch 200 determines whether it has already stored the L2 address 
associated with the L3 address of server 104. In the present example, learning 
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internetwork switch 200 has not yet stored the L2 address associated with the L3 
address of server 104. Therefore, control passes to step 406. If switch had stored the 
L2 address associated with the L3 address of server 104, learning internetwork switch 
200 would forward the packet directly to the server 104 (step 408), thereby 
5 circumventing the use of router 126. 

At step 406, learning internetwork switch 200 forwards the packet to DG on 
router 126 using L2 switching. At step 410, DG receives the packet and determines 
the outbound port to which DEST-DEV is attached (OP) through an L3 lookup. 
Router 126 has previously acquired the location of DEST-DEV using a routing 
10 protocol, such as Routing Information Protocol (RIP) or Open Shortest Path First 
(OSPF), 

Returning to the present example, learning internetwork switch 200 forwards 
the packet to port 128 on router 126 using L2 switching at step 406. At step 410, port 
128 receives the packet and determines, by performing an L3 lookup, that server 104 

15 is attached to port 130. Router 126 has previously acquired the location of server 104 
using a routing protocol. 

At step 412, router 126 sends an ARP query through OP to determine DDL2. 
The data link layer source address (S A) specified in the ARP query is the L2 address 
of OP (OPL2). The protocol-type (PT) indicates that the query is an ARP query. The 

20 network layer source address (SNLA) specified in the ARP query is the L3 address of 
OP (OPL3). The network layer destination address (DNLA) specified in the ARP 
query is DDL3. 
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In the present example, router 126 sends an ARP query through port 130 to 

determine the L2 address of server 104 (step 412). The data link layer source address 
(SA) specified in the ARP query is the L2 address of port 130. The protocol-type 
(PT) indicates that the query is an ARP query. The network layer source address 
5 (SNLA) specified in the ARP query is the L3 address of port 1 30. The network layer 
destination address (DNLA) specified in the ARP query is the L3 address of server 
104. 

At step 414, learning internetwork switch 200 receives the ARP query and 
learns from the control information contained in the ARP query that the L2 address 

10 associated with OPL3 is OPL2. At step 416, learning internetwork switch 200 

forwards the ARP query to DEST-VLAN through the port of learning internetwork 
switch 200 that corresponds to the outbound port on which router 126 sent the ARP 
query. At step 418, the L2 switch in DEST-VLAN broadcasts the ARP query to all of 
the members of DEST-VLAN. 

15 In the present example, learning internetwork switch 200 receives the ARP 

query and learns from the control information contained in the ARP query that the L2 
address associated with the L3 address of port 130 is the L2 address of port 130 (step 
414). At step 416, learning internetwork switch 200 forwards the ARP query to 
VLAN 102 through port 204. At step 418, switch 134 broadcasts the ARP query to 

20 all of the members of VLAN 102. 

At step 420, DEST-DEV receives the ARP query and transmits an ARP 
response to the ARP query. The ARP response specifies that DDL2 is the L2 address 
associated with DDL3. At step 422, the learning internetwork switch 200 receives the 
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ARP response from DEST-DEV and stores data indicating that DDL2 is the L2 

address associated with DDL3. Learning internetwork switch 200 also stores data that 
indicates that the device with the address DDL2 is connected to the port of learning 
internetwork switch 200 on which the ARP response was received. 
5 In the present example, server 104 receives the ARP query and transmits an 

ARP response to the ARP query (step 420). The ARP response specifies that the L2 
address of server 104 is the L2 address associated with the L3 address of server 104. 
O At step 422, the learning internetwork switch 200 receives the ARP response from 

=g server 104 and stores data indicating that the L2 address of server 104 is the L2 

m 

m 10 address associated with the L3 address of server 104. Learning internetwork switch 
; p 200 also stores data that indicates that the device with the L2 address of server 104 is 

" s connected to port 204. 

H 

£2 At step 424, learning internetwork switch 200 forwards the ARP response to 

|~ router 126. At step 426, router 126 transmits the packet through learning 

g 15 internetwork switch 200 to DEST-VLAN. The data link layer destination address 

(DA) specified in the packet is DDL2. The data link layer source address (S A) 
specified in the packet is the L2 address of the port of router 126 that connects router 
126 to DEST-VLAN. The protocol-type (FT) specified in the packet indicates that the 
packet is an Internet Protocol (IP) packet. The network layer source address (SNLA) 
20 specified in the packet is SDL3. The network layer destination address (DNLA) 

specified in the packet is DDL3. Based on this control information, the L2 switch in 
DEST-VLAN sends the message to DEST-DEV. At step 428, DEST-DEV receives 
the packet containing the message from SOURCE-DEV. 
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In the present example, the data link layer destination address (DA) specified 
in the packet is the L2 address of server 104. The data link layer source address (SA) 
specified in the packet is the L2 address of port 130. The protocol-type (FT) specified 
in the packet indicates that the packet is an Internet Protocol (IP) packet. The network 
5 layer source address (SNLA) specified in the packet is the L3 address of client 1 14. 
The network layer destination address (DNLA) specified in the packet is the L3 
address of server 104. Based on this control information, the switch 134 sends the 
p message to server 104. At step 428, server 104 receives the packet containing the 

g message that was originally sent from client 1 14. 

1 10 

= PROXY FORWARDING 

y 1 During the process described above, SOURCE-DEV, DEST-DEV and router 

S: 

;=; 3 126 behaved exactly as they would if learning internetwork switch 200 did not exist. 

H Thus, the presence of learning internetwork switch 200 is completely transparent to all 

*S 

O 15 of the devices involved in inter-VLAN communications. During the inter- VLAN 

u 

communication, learning internetwork switch 200 learned (1) that the L2 address 
corresponding to SDL3 is SDL2, (2) which port of learning internetwork switch 200 
is connected to SOURCE-DEV, (3) that the L2 address corresponding to DDL3 is 
DDL2, (4) which port of learning internetwork switch 200 is connected to DEST- 
20 DEV, (5) that the L2 address of DG is DGL2, and (6) that the L2 address of OP is 
OPL2. In the specific example in which client 1 14 sent a message to server 104, 
learning internetwork switch 200 learned (1) that the L2 address corresponding to the 
L3 address of client 1 14 is the L2 address of client 1 14, (2) that port 202 is connected 
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to client 1 14, (3) that the L2 address corresponding to the L3 address of server 104 is 
the L2 address of server 104, (4) that port 204 is connected to server 104, (5) the L2 
address of port 128, and (6) the L2 address of port 130. 

Having acquired the information described above, learning internetwork 
5 switch 200 has all of the information necessary to forward all future packets sent 
between SOURCE-DEV and DEST-DEV without involving router 126 in the 
forwarding process. Figure 5 is a flow chart illustrating the steps performed by 
n learning internetwork switch 200 in the proxy forwarding process. 

g Referring to Figure 5, at step 500 learning internetwork switch 200 receives a 

'H 

10 packet from SOURCE-DEV. At step 502, learning internetwork switch 200 reads the 
*** DA, the DNLA and the PT of the packet. If the DA is a port of router 126, the PT is 

IP and the DNLA is an L3 address for which learning internetwork switch 200 has 
learned the corresponding L2 address, then control passes to step 504. Otherwise, 
H control passes to step 506, where the packet is forwarded to router 126 using L2 

Q 15 forwarding. 

O 

At step 504, learning internetwork switch 200 does a lookup based on the 
DNLA specified in the packet to determine (1) the L2 address associated with the 
DNLA and (2) the port of learning internetwork switch 200 to which the device 
associated with the DNLA is attached. At step 508, learning internetwork switch 200 
20 sets the DA of the packet to the L2 address determined in step 504. Learning 

internetwork switch 200 also sets the S A of the packet to the L2 address of the port of 
router 126 that would normally route the packet. At step 510, learning internetwork 



m 
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switch 200 uses L2 routing to forward the packet through the port determined in step 
504 to the appropriate destination device. 

Assuming that the packet is a subsequent message from client 1 14 to server 
104, learning internetwork switch 200 would do a lookup based on the L3 address of 
5 server 104 to determine (1) the L2 address of server 104 and (2) that server 104 is 
attached to port 204. At step 508, learning internetwork switch 200 would set the DA 
of the packet to the L2 address of client 1 14, and set the S A of the packet to the L2 
p address of port 130. At step 510, learning internetwork switch 200 would use L2 



IB 



in 



routing to forward the packet through port 204 to server 104. 



10 



OPERATION OF LEARNING INTERNETWORK SWITCH 200 
The operation of learning internetwork switch 200 has been described above in 
^ the context of an single inter- VLAN communication. However, at any given time 

1=2 numerous packets from numerous different devices may be passing through learning 

□ 15 internetwork switch 200. The manner in which learning internetwork switch 200 
processes the packets shall be described in detail below with reference to Figures 6a 
and 6b. 

Referring to Figures 6a and 6b, learning internetwork switch 200 detects the 
arrival of a packet (step 600). At step 602, learning internetwork switch 200 
20 determines the protocol-type (PT) of the packet. If the PT is ARP, control passes to 
step 604. If the PT is IP, then control passes to step 606. If the PT is any other type 
of protocol, control passes to step 612. 
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At step 604, learning internetwork switch 200 determines whether the L3 
destination address (DNLA) of the packet is the L3 address of a port of router 126. If 
the DNLA is the L3 address of a port of router 126, then control passes to step 608. 
Otherwise, control passes to step 610. 

5 At step 608, learning internetwork switch 200 stores data indicating that (1) 

the L2 source address (SA) in the packet is the L2 address associated with the SNLA 
in the packet and (2) the device with the L2 address specified by the S A is connected 
to the port of learning internetwork switch 200 on which the packet was received. 
Control then proceeds to step 612. 

10 At step 610, learning internetwork switch 200 determines whether the SNLA 

of the packet is the 13 address of a port of router 126. If the SNLA of the packet is 
the L3 address of a port of router 126, then control passes to step 614. At step 614, 
learning internetwork switch 200 stores data indicating that the S A in the packet is the 
L2 address associated with the SNLA in the packet. If the SNLA of the packet is not 

15 the L3 address of a port of router 126, then control passes from step 610 to step 612. 

At step 612, learning internetwork switch 200 forwards the packet without 
change to the port that corresponds to the port on which the packet arrived. For 
example, if the packet arrived at port 202, learning internetwork switch 200 would 
forward the packet through the port connected to port 128. Similarly, if the packet 

20 arrived from port 128, learning internetwork switch 200 would forward the packet 
through the port 202. 
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At step 606, learning internetwork switch 200 determines whether proxy 
forwarding is enabled. If proxy forwarding is enabled, control passes to step 616. If 
proxy forwarding is not enabled, control passes to step 612. 

At step 616, learning internetwork switch 200 determines whether the DA in 
5 the packet is the L2 address of a port of router 126. If the DA in the packet is the L2 
address of a port of router 126, then control passes to step 618. Otherwise, control 
passes to step 612. 

At step 618, learning internetwork switch 200 determines whether the L2 
address that corresponds to the DNLA of the packet is known. Learning internetwork 
10 switch 200 will have stored data indicating a correspondence between an L2 address 
and the DNLA if in inter- VLAN communication between the source and destination 
devices in question has already occurred. If the L2 address that corresponds to the 
DNLA of the packet is known, then control passes to step 620. Otherwise, control 
passes to step 612. 

1 5 At step 620, learning internetwork switch 200 sets the DA in the packet to the 

L2 address that corresponds to the DNLA specified in the packet. Learning 
internetwork switch 200 also sets the S A in the packet to the L2 address of the router 
port that would normally have sent the packet. The learning internetwork switch 200 
then transmits the packet directly to the destination device using L2 forwarding by 

20 sending the packet through the port to which the destination device is attached. If 
learning internetwork switch 200 knows the L2 address associated with the DNLA, 
then learning internetwork switch 200 will also know the port to which the device 
corresponding to the DNLA is connected (see step 608). 
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Significantly, all of the operations performed by learning internetwork switch 
200 are completely transparent to all other devices in the network system 100. Thus, 
the use of learning internetwork switch 200 to perform proxy forwarding would not 
require any change in the addressing scheme used by network system 100. Further, 
5 learning internetwork switch 200 learns the addresses and locations of devices by 
inspecting certain packets that flow through learning internetwork switch 200. As a 
result, learning internetwork switch 200 does not have to participate in routing 
p protocols which may vary from network to network. In addition, operation at L2 of 

p the VLANs that are locally attached to learning internetwork switch 200 remains 

10 unchanged. 

~ In the foregoing specification, the invention has been described with reference 

lJ 1 to specific embodiments thereof. It will, however, be evident that various 

I: 

O modifications and changes may be made thereto without departing from the broader 

i 

M spirit and scope of the invention. The specification and drawings are, accordingly, to 

□ 1 5 be regarded in an illustrative rather than a restrictive sense. 
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